Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          r4FqkiaRS9hzkgybkwIZ1otAKUBGYLRTc6xzwEwKchU=
Subject key identifier:   63:1E:98:C7:4F:CC:B3:3C:90:5C:62:86:83:4C:57:A1:12:2F:47:34
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       019D98F416180BD9DDF0CF8ADA977193A526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 01:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:26 +0000
Files and hashes:         1: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: H1lCl315858HNQ9+vAz9NpnybD+pNf22Pn+ORwLtP/I=)
                          2: M2iBBMOA3qsSMyjlSglJFjGkADw.roa (hash: cG0ba+40x+sUUIApNoE0kjA0ui/lM0Su8lRnaV2pbUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:16:18:0b:d9:dd:f0:cf:8a:da:97:71:93:a5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Apr 17 01:00:26 2026 GMT
            Not After : Apr 18 01:00:26 2026 GMT
        Subject: CN=631e98c74fccb33c905c6286834c57a1122f4734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:f2:03:b5:6d:a7:97:30:e2:d5:29:ba:8e:
                    46:3b:30:19:3b:4b:61:d7:79:39:f7:d2:6a:5d:bb:
                    c3:ed:5c:c2:26:e4:07:de:3f:cd:60:12:09:d9:3d:
                    2e:88:71:d1:8a:bc:1a:77:ac:1d:56:0d:85:6b:86:
                    ea:53:bb:d2:1e:ba:21:41:37:89:f3:b3:c8:16:15:
                    4f:cc:bb:27:d6:90:50:7e:10:9d:3a:af:b9:26:03:
                    6e:84:f7:7b:79:c3:ef:f5:8c:de:ef:05:b4:ec:60:
                    d8:60:04:aa:37:89:ae:3e:0f:73:ed:ab:93:a4:85:
                    26:3b:67:8f:f0:bd:50:9b:27:05:46:43:9e:88:9d:
                    5d:46:61:bf:23:44:59:9d:4e:0d:2a:08:66:64:70:
                    da:ca:ee:fe:56:cb:b1:60:11:2c:32:e3:0f:fd:64:
                    84:34:86:0b:ce:b7:ee:45:92:e5:d5:b8:db:7b:2c:
                    2e:0e:96:57:e3:96:12:d1:78:6a:81:e3:fa:8b:93:
                    e0:98:85:b5:0e:9a:95:9c:c4:1c:ee:e6:81:6a:74:
                    a7:a7:e9:a6:a3:0a:0c:f8:96:62:55:a3:31:84:cf:
                    95:04:25:9f:b3:08:ba:aa:65:8f:c3:ef:0a:46:72:
                    e5:03:e4:36:c7:88:c7:b4:8a:b2:fd:84:a3:21:1a:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:98:C7:4F:CC:B3:3C:90:5C:62:86:83:4C:57:A1:12:2F:47:34
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:f3:94:9e:6b:d7:58:37:f9:0c:3e:a3:00:01:36:0c:d8:
         67:79:70:ee:49:7a:dc:f1:b4:f5:82:5a:b9:a8:24:bc:1c:bf:
         b2:9d:c5:fe:8d:ae:72:9b:84:3f:ea:67:56:d3:dc:ad:a5:b7:
         7c:a4:d5:65:22:ed:0e:a0:be:6f:19:08:ba:ef:b7:4b:8d:67:
         10:77:52:a9:57:00:1b:f4:2d:dd:cb:3e:36:c9:92:53:3e:5c:
         61:30:73:41:31:97:f5:b4:81:37:33:6a:21:fe:00:2b:3d:b4:
         19:66:8e:c3:96:a3:c2:c1:76:5c:ef:d5:c4:7d:4b:51:79:b2:
         9d:d9:04:6c:84:ce:fb:0d:8e:12:e0:4a:23:c8:49:0b:8e:f8:
         73:bd:99:52:5a:a5:e9:af:2a:aa:c8:90:e8:6a:c7:05:2a:58:
         95:7a:ed:d7:c6:e6:5d:dd:29:1e:e1:86:09:d3:81:38:22:40:
         c0:16:75:25:31:c4:22:28:0c:4a:a6:8a:8b:a2:f4:67:e7:4b:
         64:00:a5:a5:a5:f8:63:8b:49:c4:fe:59:e2:42:1f:8a:dd:e8:
         90:64:27:55:63:0c:4a:81:2e:30:c1:8f:37:b4:ed:9b:fd:8c:
         65:a5:87:3d:12:92:7a:e2:49:49:c0:07:42:09:30:3e:69:51:
         b2:ce:4f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9BYYC9nd8M+K2pdxk6UmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNmIyODQxNmRkYmYzOWZiMjRiMDk5NjY4NmFjZmFjZTc2
Yzk4ZDUwHhcNMjYwNDE3MDEwMDI2WhcNMjYwNDE4MDEwMDI2WjAzMTEwLwYDVQQD
Eyg2MzFlOThjNzRmY2NiMzNjOTA1YzYyODY4MzRjNTdhMTEyMmY0NzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojryA7Vtp5cw4tUpuo5GOzAZO0th
13k599JqXbvD7VzCJuQH3j/NYBIJ2T0uiHHRirwad6wdVg2Fa4bqU7vSHrohQTeJ
87PIFhVPzLsn1pBQfhCdOq+5JgNuhPd7ecPv9Yze7wW07GDYYASqN4muPg9z7auT
pIUmO2eP8L1QmycFRkOeiJ1dRmG/I0RZnU4NKghmZHDayu7+VsuxYBEsMuMP/WSE
NIYLzrfuRZLl1bjbeywuDpZX45YS0XhqgeP6i5PgmIW1DpqVnMQc7uaBanSnp+mm
owoM+JZiVaMxhM+VBCWfswi6qmWPw+8KRnLlA+Q2x4jHtIqy/YSjIRqSyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMemMdPzLM8kFxihoNMV6ESL0c0MB8GA1UdIwQY
MBaAFPFrKEFt2/OfsksJlmhqz6znbJjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYt
Y2RhYTU4MTUxOGYzLzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYtY2RhYTU4MTUxOGYz
LzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw/zlJ5r
11g3+Qw+owABNgzYZ3lw7kl63PG09YJauagkvBy/sp3F/o2ucpuEP+pnVtPcraW3
fKTVZSLtDqC+bxkIuu+3S41nEHdSqVcAG/Qt3cs+NsmSUz5cYTBzQTGX9bSBNzNq
If4AKz20GWaOw5ajwsF2XO/VxH1LUXmyndkEbITO+w2OEuBKI8hJC474c72ZUlql
6a8qqsiQ6GrHBSpYlXrt18bmXd0pHuGGCdOBOCJAwBZ1JTHEIigMSqaKi6L0Z+dL
ZAClpaX4Y4tJxP5Z4kIfit3okGQnVWMMSoEuMMGPN7Ttm/2MZaWHPRKSeuJJScAH
QgkwPmlRss5PUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:09 2026 by rpki-client